Re: [pfSense-discussion] openVPN routing

2008-09-22 Thread Paul Mansfield
Mark Dueck wrote:
> I am having some problems getting openVPN to route a properly from site
> to site.  I had it working perfectly in between, but now nothing seems
> to make a difference to make it work.


what does "netstat -rn" say


Re: [pfSense-discussion] openVPN routing

2008-08-20 Thread Mark Dueck




Mark Dueck wrote:
Hi,
  
I am having some problems getting openVPN to route a properly from site
to site.  I had it working perfectly in between, but now nothing seems
to make a difference to make it work.
  
The VPN comes up fine on the client side:
  

  
Aug 20 15:09:16
openvpn[55654]: Initialization Sequence
Completed
  
  
Aug 20 15:09:15
openvpn[55654]: Peer Connection Initiated
with
172.20.0.100:1194
  
  
Aug 20 15:09:09
openvpn[55654]: UDPv4 link remote:
172.20.0.100:1194
  
  
Aug 20 15:09:09
openvpn[55654]: UDPv4 link local: [undef]
  
  
Aug 20 15:09:09
openvpn[55618]: Output Traffic Shaping
initialized at 8000 bytes per second
  
  
Aug 20 15:09:03
openvpn[54038]: SIGTERM[hard,] received,
process exiting
  
  
Aug 20 15:08:56
openvpn[55618]: /etc/rc.filter_configure tun0
1500 1545 192.168.99.2 192.168.99.1 init
  
  
Aug 20 15:08:56
openvpn[55618]: /sbin/ifconfig tun0
192.168.99.2 192.168.99.1 mtu 1500 netmask 255.255.255.255 up
  
  
Aug 20 15:08:56
openvpn[55618]: TUN/TAP device /dev/tun0
opened
  
  
Aug 20 15:08:56
openvpn[55618]: gw 172.20.0.2
  
  
Aug 20 15:08:55
openvpn[55618]: LZO compression initialized
  
  
Aug 20 15:08:55
openvpn[55618]: WARNING: file
'/var/etc/openvpn_client0.secret' is group or others accessible
  
  
Aug 20 15:08:55
openvpn[55618]: IMPORTANT: OpenVPN's default
port
number is now 1194, based on an official port number assignment by
IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
  
  
Aug 20 15:08:55
openvpn[55618]: OpenVPN 2.0.6
i386-portbld-freebsd6.2 [SSL] [LZO] built on Sep 13 2007
  
  
Aug 20 15:08:52
openvpn[54038]: /etc/rc.filter_configure tun0
1500 1545 192.168.99.2 192.168.99.1 init
  
  
Aug 20 15:08:52
openvpn[54038]: event_wait : Interrupted
system
call (code=4)
  

  
  
  
and the Server side:
  

  
Aug 20 15:09:09
openvpn[53487]: Peer Connection Initiated
with
172.20.0.101:2722
  
  
Aug 20 15:01:40
openvpn[53487]: Initialization Sequence
Completed
  

  
  
I can ping the pfSense box from either lan, to wan and lan side of the
box,  but I cannot ping any computers after the pfSense box.
  
The strangeness of it is that openVPN and IPSEC have both exactly the
same behaviour.
  
Thanks.

I got the IPSEC working now.  no clue what was going on, but at least
it's up.

Thanks.




[pfSense-discussion] openVPN routing

2008-08-20 Thread Mark Dueck




Hi,

I am having some problems getting openVPN to route a properly from site
to site.  I had it working perfectly in between, but now nothing seems
to make a difference to make it work.

The VPN comes up fine on the client side:

  

  Aug 20 15:09:16
  openvpn[55654]: Initialization Sequence
Completed


  Aug 20 15:09:15
  openvpn[55654]: Peer Connection Initiated with
172.20.0.100:1194


  Aug 20 15:09:09
  openvpn[55654]: UDPv4 link remote:
172.20.0.100:1194


  Aug 20 15:09:09
  openvpn[55654]: UDPv4 link local: [undef]


  Aug 20 15:09:09
  openvpn[55618]: Output Traffic Shaping
initialized at 8000 bytes per second


  Aug 20 15:09:03
  openvpn[54038]: SIGTERM[hard,] received,
process exiting


  Aug 20 15:08:56
  openvpn[55618]: /etc/rc.filter_configure tun0
1500 1545 192.168.99.2 192.168.99.1 init


  Aug 20 15:08:56
  openvpn[55618]: /sbin/ifconfig tun0
192.168.99.2 192.168.99.1 mtu 1500 netmask 255.255.255.255 up


  Aug 20 15:08:56
  openvpn[55618]: TUN/TAP device /dev/tun0 opened


  Aug 20 15:08:56
  openvpn[55618]: gw 172.20.0.2


  Aug 20 15:08:55
  openvpn[55618]: LZO compression initialized


  Aug 20 15:08:55
  openvpn[55618]: WARNING: file
'/var/etc/openvpn_client0.secret' is group or others accessible


  Aug 20 15:08:55
  openvpn[55618]: IMPORTANT: OpenVPN's default
port
number is now 1194, based on an official port number assignment by
IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.


  Aug 20 15:08:55
  openvpn[55618]: OpenVPN 2.0.6
i386-portbld-freebsd6.2 [SSL] [LZO] built on Sep 13 2007


  Aug 20 15:08:52
  openvpn[54038]: /etc/rc.filter_configure tun0
1500 1545 192.168.99.2 192.168.99.1 init


  Aug 20 15:08:52
  openvpn[54038]: event_wait : Interrupted system
call (code=4)

  



and the Server side:

  

  Aug 20 15:09:09
  openvpn[53487]: Peer Connection Initiated with
172.20.0.101:2722


  Aug 20 15:01:40
  openvpn[53487]: Initialization Sequence
Completed

  


I can ping the pfSense box from either lan, to wan and lan side of the
box,  but I cannot ping any computers after the pfSense box.

The strangeness of it is that openVPN and IPSEC have both exactly the
same behaviour.

Thanks.